/**
 * Copyright (c) 2015-2016, Michael Yang 杨福海 (fuhai999@gmail.com).
 *
 * Licensed under the GNU Lesser General Public License (LGPL) ,Version 3.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *      http://www.gnu.org/licenses/lgpl-3.0.txt
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */
package io.jpress.interceptor;

import io.jpress.core.JBaseController;
import io.jpress.model.User;
import io.jpress.utils.EncryptUtils;

import com.jfinal.aop.Interceptor;
import com.jfinal.aop.Invocation;
import com.jfinal.core.Controller;

public class UCodeInterceptor implements Interceptor {

	@Override
	public void intercept(Invocation inv) {
		if (isMultipartRequest(inv)) {
			inv.getController().getFile();
		}
		String ucode = inv.getController().getPara("ucode");
		if (ucode == null || "".equals(ucode.trim())) {
			renderError(inv);
			return;
		}

		User user = InterUtils.tryToGetUser(inv);
		if (user == null) {
			renderError(inv);
			return;
		}

		if (!ucode.equals(EncryptUtils.generateUcode(user))) {
			renderError(inv);
			return;
		}

		inv.invoke();
	}

	private boolean isMultipartRequest(Invocation inv) {
		String contentType = inv.getController().getRequest().getContentType();
		return contentType != null && contentType.toLowerCase().indexOf("multipart") != -1;
	}

	private void renderError(Invocation inv) {
		Controller c = inv.getController();
		if (c instanceof JBaseController) {
			((JBaseController) c).renderAjaxResultForError("非法提交");
		} else {
			c.renderError(404);
		}
	}

}
